SharePoint exposed web services in a subdomain

Disclosed: 2020-05-16 13:06:35 By miguel_santareno To mtn_group
Medium
Vulnerability Details
Hi there I found a subdomain that is sharepoint configuration is poorly implemented Because of improper configuration an anonymous user can access to the SharePoint Web Services. POC: Go to the following url: https://www.mtn.co.za/_vti_bin/lists.asmx?WSDL services.jpg Remediation Restrict access to this page. References: https://www.acunetix.com/vulnerabilities/web/vulnerability/sharepoint-exposed-web-services/ https://blogs.msdn.microsoft.com/fabdulwahab/2015/08/15/security-protecting-sharepoint-server-applications/ Best Regards Miguel Santareno ## Impact Attackers can know the full structure off the application.
Actions
View on HackerOne
Report Stats
  • Report ID: 761158
  • State: Closed
  • Substate: resolved
  • Upvotes: 28
Share this report